Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32342d3234203d3e203130383735.roa
File:                     3230302e3233382e302e302f32342d3234203d3e203130383735.roa (raw, json)
Hash identifier:          0jhW7qLSYgxmHtx9zWdqwxn6n2INgo+x0Ldnxve+4Wg=
Subject key identifier:   6E:80:2A:F7:61:0E:47:51:9E:09:C8:E0:03:B0:5B:F4:CE:0E:DA:B5
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       1DB4D89D5DB5DEA3B35104FBA4CC91A743533941
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32342d3234203d3e203130383735.roa
Signing time:             Fri 13 Jun 2025 18:08:57 +0000
ROA not before:           Fri 13 Jun 2025 18:03:57 +0000
ROA not after:            Fri 12 Jun 2026 18:08:57 +0000
asID:                     10875
IP address blocks:        200.238.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 10:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b4:d8:9d:5d:b5:de:a3:b3:51:04:fb:a4:cc:91:a7:43:53:39:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Jun 13 18:03:57 2025 GMT
            Not After : Jun 12 18:08:57 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:ff:22:dd:2d:7c:76:52:c3:88:d3:fa:e1:
                    ce:7b:25:aa:13:a0:e7:4c:9f:2d:02:33:3a:97:2e:
                    f4:e6:54:9f:f8:f7:b7:50:ae:21:06:8e:89:bc:b0:
                    22:b3:14:f4:82:a7:0b:fb:51:3d:1f:02:e6:70:07:
                    95:96:48:d2:0c:b1:ce:a5:26:5c:66:86:c7:59:43:
                    23:40:d7:0b:36:34:be:61:93:d4:04:f7:ce:97:34:
                    70:6a:88:2c:6a:07:65:2d:53:20:7c:26:2d:95:ea:
                    ec:0f:ed:9e:8d:21:bb:5e:db:ff:12:cd:4e:c0:ff:
                    46:eb:93:a4:f5:d3:8b:98:b0:2c:37:82:3e:a9:a8:
                    ef:72:08:f8:6d:e6:d9:0c:b5:33:ca:96:b3:83:f1:
                    9e:1a:ba:06:72:b5:be:35:5b:f4:91:9a:ed:7d:25:
                    f5:0e:07:40:4e:27:c3:75:2f:64:e3:a0:7c:29:31:
                    c3:74:33:7c:88:81:ca:79:95:63:f8:4a:d3:e7:46:
                    09:5c:da:76:9a:2f:1b:f2:ea:ca:ba:f7:59:6c:09:
                    d2:a7:b2:bf:7c:24:1b:35:b8:22:0a:ba:ab:96:7c:
                    3c:3c:8f:8f:0f:19:e0:1d:62:a0:9b:bc:fa:c7:5b:
                    b2:ee:31:9b:08:c5:48:ed:ab:82:af:b2:9a:c8:31:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:2A:F7:61:0E:47:51:9E:09:C8:E0:03:B0:5B:F4:CE:0E:DA:B5
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32342d3234203d3e203130383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:87:f5:71:df:5b:f9:70:13:35:d8:c7:1d:04:a4:3b:13:21:
         78:74:8d:d3:5c:ec:9b:af:68:49:51:c5:4b:28:96:6d:86:38:
         41:c3:43:7b:ba:63:25:76:e7:ad:d6:f8:f5:4e:3c:e2:a6:5e:
         25:46:03:13:40:2b:91:d4:b2:39:f5:cb:e3:77:06:25:76:f5:
         e0:14:f3:a1:a6:13:57:2c:8f:ea:2f:73:41:4e:ed:79:82:42:
         aa:d8:ea:af:05:ed:28:68:fc:ce:3d:d1:1a:14:58:42:de:8d:
         72:17:8a:a5:f0:9f:31:10:03:00:80:5d:2b:dd:44:56:6d:a8:
         6c:e0:30:88:b3:0b:6e:5e:43:3b:f4:f5:3f:66:7e:03:68:b7:
         ab:1c:7b:96:01:ed:ce:0f:b0:05:10:f9:87:f8:80:c4:f7:0d:
         73:46:b1:48:c3:16:99:ba:f3:46:d7:1d:9d:ac:a5:37:d5:f9:
         b6:65:dc:c7:0b:7b:ea:a0:fe:f2:97:f3:64:ed:b7:da:be:fb:
         0e:a5:ae:a0:64:84:86:01:22:61:2d:d8:e7:46:2f:69:b1:b4:
         16:d5:1f:67:12:59:af:92:2a:7b:d8:ef:48:6a:b9:f1:e6:06:
         09:bc:72:c0:e9:8f:48:21:8c:7c:af:b2:56:6f:3e:04:cd:63:
         5b:3c:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:29:10 2025 by rpki-client